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Generating Assertion Information Comprising 
Identity Information Associated With A User 
That Is Authorized To Sign-on To The Network, 
Each Of The Network Of Trusted Partner Sites 
Communicatively Coupled Together 



Through A Communication Network 
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Generating A Plurality Of Artifacts On Demand That 
Are Associated With The Assertion Information 
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Sending The Plurality Of Artifacts To A Group Of 
Trusted Partner Sites Of The Network In Order 
To Facilitate Single Sign-On Capabilities Of The 
Network, Wherein Each Of Artifacts Allows Access To 
The Assertion Information So That Each 
Of The Group Of Trusted Partner Sites 
Can Individually Authorize Access By The User 
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Receiving A First Artifact Of The Plurality 
Of Artifacts Through The Communication 
Network From A First Trusted Partner 
Site, Wherein The Group Of Trusted Partner 
Sites Includes The First Trusted Partner Site 







Authentication Of The First Artifact To 
The First Trusted Partner Site 
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Sending The Assertion Information To The 
First Trusted Partner Site, Transparently 
To The User, To Enable The First Trusted 
Partner Site To Authenticate The User And 
Authorize Access To The First Trusted 
Partner Site Based On The Assertion Information 
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Receiving An Artifact Through A 
Communication Network At A First Trusted 

Partner Site Of A Network Of Trusted 
Partner Sites, Each Of Which Are Coupled 

To A Central Service Provider Through 
The Communication Network, Wherein The 
Artifact Is Associated With Assertion 
Information Stored At The Central Service Provider 
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Sending The Artifact To The Central 
Service Provider Over The Communication 
Network To Retrieve The Assertion Information 
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Receiving The Assertion Information From 
The Central Service Provider Over The 
Communication Network 
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Determining Authorization For The User To 
Access The First Trusted Partner Site 
Based On The Assertion Information 
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